google-cloud-resource_manager-v3 0.4.0 → 0.5.1

data/lib/google/cloud/resource_manager/v3/tag_values/rest/client.rb

@@ -190,15 +190,14 @@ module Google
               #   the default parameter values, pass an empty Hash as a request object (see above).
               #
               #   @param parent [::String]
-              #     Required. Resource name for TagKey, parent of the TagValues to be listed,
-              #     in the format `tagKeys/123`.
+              #     Required.
               #   @param page_size [::Integer]
-              #     Optional. The maximum number of TagValues to return in the response. The server
-              #     allows a maximum of 300 TagValues to return. If unspecified, the server
-              #     will use 100 as the default.
+              #     Optional. The maximum number of TagValues to return in the response. The
+              #     server allows a maximum of 300 TagValues to return. If unspecified, the
+              #     server will use 100 as the default.
               #   @param page_token [::String]
-              #     Optional. A pagination token returned from a previous call to `ListTagValues`
-              #     that indicates where this listing should continue from.
+              #     Optional. A pagination token returned from a previous call to
+              #     `ListTagValues` that indicates where this listing should continue from.
               # @yield [result, operation] Access the result along with the TransportOperation object
               # @yieldparam result [::Gapic::Rest::PagedEnumerable<::Google::Cloud::ResourceManager::V3::TagValue>]
               # @yieldparam operation [::Gapic::Rest::TransportOperation]
@@ -243,9 +242,8 @@ module Google
               end
 
               ##
-              # Retrieves TagValue. If the TagValue or namespaced name does not exist, or
-              # if the user does not have permission to view it, this method will return
-              # `PERMISSION_DENIED`.
+              # Retrieves a TagValue. This method will return `PERMISSION_DENIED` if the
+              # value does not exist or the user does not have permission to view it.
               #
               # @overload get_tag_value(request, options = nil)
               #   Pass arguments to `get_tag_value` via a request object, either of type
@@ -263,7 +261,8 @@ module Google
               #   the default parameter values, pass an empty Hash as a request object (see above).
               #
               #   @param name [::String]
-              #     Required. Resource name for TagValue to be fetched in the format `tagValues/456`.
+              #     Required. Resource name for TagValue to be fetched in the format
+              #     `tagValues/456`.
               # @yield [result, operation] Access the result along with the TransportOperation object
               # @yieldparam result [::Google::Cloud::ResourceManager::V3::TagValue]
               # @yieldparam operation [::Gapic::Rest::TransportOperation]
@@ -306,10 +305,82 @@ module Google
                 raise ::Google::Cloud::Error.from_error(e)
               end
 
+              ##
+              # Retrieves a TagValue by its namespaced name.
+              # This method will return `PERMISSION_DENIED` if the value does not exist
+              # or the user does not have permission to view it.
+              #
+              # @overload get_namespaced_tag_value(request, options = nil)
+              #   Pass arguments to `get_namespaced_tag_value` via a request object, either of type
+              #   {::Google::Cloud::ResourceManager::V3::GetNamespacedTagValueRequest} or an equivalent Hash.
+              #
+              #   @param request [::Google::Cloud::ResourceManager::V3::GetNamespacedTagValueRequest, ::Hash]
+              #     A request object representing the call parameters. Required. To specify no
+              #     parameters, or to keep all the default parameter values, pass an empty Hash.
+              #   @param options [::Gapic::CallOptions, ::Hash]
+              #     Overrides the default settings for this call, e.g, timeout, retries etc. Optional.
+              #
+              # @overload get_namespaced_tag_value(name: nil)
+              #   Pass arguments to `get_namespaced_tag_value` via keyword arguments. Note that at
+              #   least one keyword argument is required. To specify no parameters, or to keep all
+              #   the default parameter values, pass an empty Hash as a request object (see above).
+              #
+              #   @param name [::String]
+              #     Required. A namespaced tag value name in the following format:
+              #
+              #       `{parentId}/{tagKeyShort}/{tagValueShort}`
+              #
+              #     Examples:
+              #     - `42/foo/abc` for a value with short name "abc" under the key with short
+              #       name "foo" under the organization with ID 42
+              #     - `r2-d2/bar/xyz` for a value with short name "xyz" under the key with
+              #        short name "bar" under the project with ID "r2-d2"
+              # @yield [result, operation] Access the result along with the TransportOperation object
+              # @yieldparam result [::Google::Cloud::ResourceManager::V3::TagValue]
+              # @yieldparam operation [::Gapic::Rest::TransportOperation]
+              #
+              # @return [::Google::Cloud::ResourceManager::V3::TagValue]
+              #
+              # @raise [::Google::Cloud::Error] if the REST call is aborted.
+              def get_namespaced_tag_value request, options = nil
+                raise ::ArgumentError, "request must be provided" if request.nil?
+
+                request = ::Gapic::Protobuf.coerce request, to: ::Google::Cloud::ResourceManager::V3::GetNamespacedTagValueRequest
+
+                # Converts hash and nil to an options object
+                options = ::Gapic::CallOptions.new(**options.to_h) if options.respond_to? :to_h
+
+                # Customize the options with defaults
+                call_metadata = @config.rpcs.get_namespaced_tag_value.metadata.to_h
+
+                # Set x-goog-api-client and x-goog-user-project headers
+                call_metadata[:"x-goog-api-client"] ||= ::Gapic::Headers.x_goog_api_client \
+                  lib_name: @config.lib_name, lib_version: @config.lib_version,
+                  gapic_version: ::Google::Cloud::ResourceManager::V3::VERSION,
+                  transports_version_send: [:rest]
+
+                call_metadata[:"x-goog-user-project"] = @quota_project_id if @quota_project_id
+
+                options.apply_defaults timeout:      @config.rpcs.get_namespaced_tag_value.timeout,
+                                       metadata:     call_metadata,
+                                       retry_policy: @config.rpcs.get_namespaced_tag_value.retry_policy
+
+                options.apply_defaults timeout:      @config.timeout,
+                                       metadata:     @config.metadata,
+                                       retry_policy: @config.retry_policy
+
+                @tag_values_stub.get_namespaced_tag_value request, options do |result, operation|
+                  yield result, operation if block_given?
+                  return result
+                end
+              rescue ::Gapic::Rest::Error => e
+                raise ::Google::Cloud::Error.from_error(e)
+              end
+
               ##
               # Creates a TagValue as a child of the specified TagKey. If a another
               # request with the same parameters is sent while the original request is in
-              # process the second request will receive an error. A maximum of 300
+              # process the second request will receive an error. A maximum of 1000
               # TagValues can exist under a TagKey at any given time.
               #
               # @overload create_tag_value(request, options = nil)
@@ -328,11 +399,11 @@ module Google
               #   the default parameter values, pass an empty Hash as a request object (see above).
               #
               #   @param tag_value [::Google::Cloud::ResourceManager::V3::TagValue, ::Hash]
-              #     Required. The TagValue to be created. Only fields `short_name`, `description`,
-              #     and `parent` are considered during the creation request.
+              #     Required. The TagValue to be created. Only fields `short_name`,
+              #     `description`, and `parent` are considered during the creation request.
               #   @param validate_only [::Boolean]
-              #     Optional. Set as true to perform the validations necessary for creating the resource,
-              #     but not actually perform the action.
+              #     Optional. Set as true to perform the validations necessary for creating the
+              #     resource, but not actually perform the action.
               # @yield [result, operation] Access the result along with the TransportOperation object
               # @yieldparam result [::Gapic::Operation]
               # @yieldparam operation [::Gapic::Rest::TransportOperation]
@@ -395,15 +466,15 @@ module Google
               #   the default parameter values, pass an empty Hash as a request object (see above).
               #
               #   @param tag_value [::Google::Cloud::ResourceManager::V3::TagValue, ::Hash]
-              #     Required. The new definition of the TagValue. Only fields `description` and `etag`
-              #     fields can be updated by this request. If the `etag` field is nonempty, it
-              #     must match the `etag` field of the existing ControlGroup. Otherwise,
-              #     `FAILED_PRECONDITION` will be returned.
+              #     Required. The new definition of the TagValue. Only fields `description` and
+              #     `etag` fields can be updated by this request. If the `etag` field is
+              #     nonempty, it must match the `etag` field of the existing ControlGroup.
+              #     Otherwise, `ABORTED` will be returned.
               #   @param update_mask [::Google::Protobuf::FieldMask, ::Hash]
               #     Optional. Fields to be updated.
               #   @param validate_only [::Boolean]
-              #     Optional. True to perform validations necessary for updating the resource, but not
-              #     actually perform the action.
+              #     Optional. True to perform validations necessary for updating the resource,
+              #     but not actually perform the action.
               # @yield [result, operation] Access the result along with the TransportOperation object
               # @yieldparam result [::Gapic::Operation]
               # @yieldparam operation [::Gapic::Rest::TransportOperation]
@@ -467,13 +538,14 @@ module Google
               #   the default parameter values, pass an empty Hash as a request object (see above).
               #
               #   @param name [::String]
-              #     Required. Resource name for TagValue to be deleted in the format tagValues/456.
+              #     Required. Resource name for TagValue to be deleted in the format
+              #     tagValues/456.
               #   @param validate_only [::Boolean]
-              #     Optional. Set as true to perform the validations necessary for deletion, but not
-              #     actually perform the action.
+              #     Optional. Set as true to perform the validations necessary for deletion,
+              #     but not actually perform the action.
               #   @param etag [::String]
-              #     Optional. The etag known to the client for the expected state of the TagValue. This
-              #     is to be used for optimistic concurrency.
+              #     Optional. The etag known to the client for the expected state of the
+              #     TagValue. This is to be used for optimistic concurrency.
               # @yield [result, operation] Access the result along with the TransportOperation object
               # @yieldparam result [::Gapic::Operation]
               # @yieldparam operation [::Gapic::Rest::TransportOperation]
@@ -776,9 +848,9 @@ module Google
               #    *  (`String`) The path to a service account key file in JSON format
               #    *  (`Hash`) A service account key as a Hash
               #    *  (`Google::Auth::Credentials`) A googleauth credentials object
-              #       (see the [googleauth docs](https://googleapis.dev/ruby/googleauth/latest/index.html))
+              #       (see the [googleauth docs](https://rubydoc.info/gems/googleauth/Google/Auth/Credentials))
               #    *  (`Signet::OAuth2::Client`) A signet oauth2 client object
-              #       (see the [signet docs](https://googleapis.dev/ruby/signet/latest/Signet/OAuth2/Client.html))
+              #       (see the [signet docs](https://rubydoc.info/gems/signet/Signet/OAuth2/Client))
               #    *  (`nil`) indicating no credentials
               #   @return [::Object]
               # @!attribute [rw] scope
@@ -872,6 +944,11 @@ module Google
                   #
                   attr_reader :get_tag_value
                   ##
+                  # RPC-specific configuration for `get_namespaced_tag_value`
+                  # @return [::Gapic::Config::Method]
+                  #
+                  attr_reader :get_namespaced_tag_value
+                  ##
                   # RPC-specific configuration for `create_tag_value`
                   # @return [::Gapic::Config::Method]
                   #
@@ -908,6 +985,8 @@ module Google
                     @list_tag_values = ::Gapic::Config::Method.new list_tag_values_config
                     get_tag_value_config = parent_rpcs.get_tag_value if parent_rpcs.respond_to? :get_tag_value
                     @get_tag_value = ::Gapic::Config::Method.new get_tag_value_config
+                    get_namespaced_tag_value_config = parent_rpcs.get_namespaced_tag_value if parent_rpcs.respond_to? :get_namespaced_tag_value
+                    @get_namespaced_tag_value = ::Gapic::Config::Method.new get_namespaced_tag_value_config
                     create_tag_value_config = parent_rpcs.create_tag_value if parent_rpcs.respond_to? :create_tag_value
                     @create_tag_value = ::Gapic::Config::Method.new create_tag_value_config
                     update_tag_value_config = parent_rpcs.update_tag_value if parent_rpcs.respond_to? :update_tag_value

data/lib/google/cloud/resource_manager/v3/tag_values/rest/operations.rb

@@ -411,9 +411,9 @@ module Google
               #    *  (`String`) The path to a service account key file in JSON format
               #    *  (`Hash`) A service account key as a Hash
               #    *  (`Google::Auth::Credentials`) A googleauth credentials object
-              #       (see the [googleauth docs](https://googleapis.dev/ruby/googleauth/latest/index.html))
+              #       (see the [googleauth docs](https://rubydoc.info/gems/googleauth/Google/Auth/Credentials))
               #    *  (`Signet::OAuth2::Client`) A signet oauth2 client object
-              #       (see the [signet docs](https://googleapis.dev/ruby/signet/latest/Signet/OAuth2/Client.html))
+              #       (see the [signet docs](https://rubydoc.info/gems/signet/Signet/OAuth2/Client))
               #    *  (`nil`) indicating no credentials
               #   @return [::Object]
               # @!attribute [rw] scope

data/lib/google/cloud/resource_manager/v3/tag_values/rest/service_stub.rb

@@ -116,6 +116,44 @@ module Google
                 result
               end
 
+              ##
+              # Baseline implementation for the get_namespaced_tag_value REST call
+              #
+              # @param request_pb [::Google::Cloud::ResourceManager::V3::GetNamespacedTagValueRequest]
+              #   A request object representing the call parameters. Required.
+              # @param options [::Gapic::CallOptions]
+              #   Overrides the default settings for this call, e.g, timeout, retries etc. Optional.
+              #
+              # @yield [result, operation] Access the result along with the TransportOperation object
+              # @yieldparam result [::Google::Cloud::ResourceManager::V3::TagValue]
+              # @yieldparam operation [::Gapic::Rest::TransportOperation]
+              #
+              # @return [::Google::Cloud::ResourceManager::V3::TagValue]
+              #   A result object deserialized from the server's reply
+              def get_namespaced_tag_value request_pb, options = nil
+                raise ::ArgumentError, "request must be provided" if request_pb.nil?
+
+                verb, uri, query_string_params, body = ServiceStub.transcode_get_namespaced_tag_value_request request_pb
+                query_string_params = if query_string_params.any?
+                                        query_string_params.to_h { |p| p.split("=", 2) }
+                                      else
+                                        {}
+                                      end
+
+                response = @client_stub.make_http_request(
+                  verb,
+                  uri:     uri,
+                  body:    body || "",
+                  params:  query_string_params,
+                  options: options
+                )
+                operation = ::Gapic::Rest::TransportOperation.new response
+                result = ::Google::Cloud::ResourceManager::V3::TagValue.decode_json response.body, ignore_unknown_fields: true
+
+                yield result, operation if block_given?
+                result
+              end
+
               ##
               # Baseline implementation for the create_tag_value REST call
               #
@@ -384,6 +422,25 @@ module Google
                 transcoder.transcode request_pb
               end
 
+              ##
+              # @private
+              #
+              # GRPC transcoding helper method for the get_namespaced_tag_value REST call
+              #
+              # @param request_pb [::Google::Cloud::ResourceManager::V3::GetNamespacedTagValueRequest]
+              #   A request object representing the call parameters. Required.
+              # @return [Array(String, [String, nil], Hash{String => String})]
+              #   Uri, Body, Query string parameters
+              def self.transcode_get_namespaced_tag_value_request request_pb
+                transcoder = Gapic::Rest::GrpcTranscoder.new
+                                                        .with_bindings(
+                                                          uri_method: :get,
+                                                          uri_template: "/v3/tagValues/namespaced",
+                                                          matches: []
+                                                        )
+                transcoder.transcode request_pb
+              end
+
               ##
               # @private
               #

data/lib/google/cloud/resource_manager/v3/version.rb

@@ -21,7 +21,7 @@ module Google
   module Cloud
     module ResourceManager
       module V3
-        VERSION = "0.4.0"
+        VERSION = "0.5.1"
       end
     end
   end

data/lib/google/cloud/resource_manager/v3.rb

@@ -20,6 +20,7 @@ require "google/cloud/resource_manager/v3/folders"
 require "google/cloud/resource_manager/v3/organizations"
 require "google/cloud/resource_manager/v3/projects"
 require "google/cloud/resource_manager/v3/tag_bindings"
+require "google/cloud/resource_manager/v3/tag_holds"
 require "google/cloud/resource_manager/v3/tag_keys"
 require "google/cloud/resource_manager/v3/tag_values"
 require "google/cloud/resource_manager/v3/version"

data/lib/google/cloud/resourcemanager/v3/folders_services_pb.rb

@@ -87,7 +87,9 @@ module Google
             # Updates a folder, changing its `display_name`.
             # Changes to the folder `display_name` will be rejected if they violate
             # either the `display_name` formatting rules or the naming constraints
-            # described in the [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
+            # described in the
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder]
+            # documentation.
             #
             # The folder's `display_name` must start and end with a letter or digit,
             # may contain letters, digits, spaces, hyphens and underscores and can be
@@ -114,29 +116,33 @@ module Google
             # `FolderOperation` message as an aid to stateless clients.
             # Folder moves will be rejected if they violate either the naming, height,
             # or fanout constraints described in the
-            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
-            # The caller must have `resourcemanager.folders.move` permission on the
-            # folder's current and proposed new parent.
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder]
+            # documentation. The caller must have `resourcemanager.folders.move`
+            # permission on the folder's current and proposed new parent.
             rpc :MoveFolder, ::Google::Cloud::ResourceManager::V3::MoveFolderRequest, ::Google::Longrunning::Operation
             # Requests deletion of a folder. The folder is moved into the
-            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED] state
-            # immediately, and is deleted approximately 30 days later. This method may
-            # only be called on an empty folder, where a folder is empty if it doesn't
-            # contain any folders or projects in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state.
-            # If called on a folder in [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
+            # state immediately, and is deleted approximately 30 days later. This method
+            # may only be called on an empty folder, where a folder is empty if it
+            # doesn't contain any folders or projects in the
+            # [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. If
+            # called on a folder in
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Folder.State.DELETE_REQUESTED]
             # state the operation will result in a no-op success.
             # The caller must have `resourcemanager.folders.delete` permission on the
             # identified folder.
             rpc :DeleteFolder, ::Google::Cloud::ResourceManager::V3::DeleteFolderRequest, ::Google::Longrunning::Operation
             # Cancels the deletion request for a folder. This method may be called on a
-            # folder in any state. If the folder is in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE]
-            # state the result will be a no-op success. In order to succeed, the folder's
-            # parent must be in the [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. In addition,
-            # reintroducing the folder into the tree must not violate folder naming,
-            # height, and fanout constraints described in the
-            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder] documentation.
-            # The caller must have `resourcemanager.folders.undelete` permission on the
-            # identified folder.
+            # folder in any state. If the folder is in the
+            # [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state the
+            # result will be a no-op success. In order to succeed, the folder's parent
+            # must be in the
+            # [ACTIVE][google.cloud.resourcemanager.v3.Folder.State.ACTIVE] state. In
+            # addition, reintroducing the folder into the tree must not violate folder
+            # naming, height, and fanout constraints described in the
+            # [CreateFolder][google.cloud.resourcemanager.v3.Folders.CreateFolder]
+            # documentation. The caller must have `resourcemanager.folders.undelete`
+            # permission on the identified folder.
             rpc :UndeleteFolder, ::Google::Cloud::ResourceManager::V3::UndeleteFolderRequest, ::Google::Longrunning::Operation
             # Gets the access control policy for a folder. The returned policy may be
             # empty if no such policy or resource exists. The `resource` field should

data/lib/google/cloud/resourcemanager/v3/projects_services_pb.rb

@@ -78,9 +78,12 @@ module Google
             # Upon success, the `Operation.response` field will be populated with the
             # moved project.
             #
-            # The caller must have `resourcemanager.projects.update` permission on the
-            # project and have `resourcemanager.projects.move` permission on the
-            # project's current and proposed new parent.
+            # The caller must have `resourcemanager.projects.move` permission on the
+            # project, on the project's current and proposed new parent.
+            #
+            # If project has no current parent, or it currently does not have an
+            # associated organization resource, you will also need the
+            # `resourcemanager.projects.setIamPolicy` permission in the project.
             #
             #
             rpc :MoveProject, ::Google::Cloud::ResourceManager::V3::MoveProjectRequest, ::Google::Longrunning::Operation
@@ -92,7 +95,8 @@ module Google
             #
             # This method changes the Project's lifecycle state from
             # [ACTIVE][google.cloud.resourcemanager.v3.Project.State.ACTIVE]
-            # to [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Project.State.DELETE_REQUESTED].
+            # to
+            # [DELETE_REQUESTED][google.cloud.resourcemanager.v3.Project.State.DELETE_REQUESTED].
             # The deletion starts at an unspecified time,
             # at which point the Project is no longer accessible.
             #
@@ -127,10 +131,12 @@ module Google
             # The caller must have `resourcemanager.projects.undelete` permission for
             # this project.
             rpc :UndeleteProject, ::Google::Cloud::ResourceManager::V3::UndeleteProjectRequest, ::Google::Longrunning::Operation
-            # Returns the IAM access control policy for the specified project.
+            # Returns the IAM access control policy for the specified project, in the
+            # format `projects/{ProjectIdOrNumber}` e.g. projects/123.
             # Permission is denied if the policy or the resource do not exist.
             rpc :GetIamPolicy, ::Google::Iam::V1::GetIamPolicyRequest, ::Google::Iam::V1::Policy
-            # Sets the IAM access control policy for the specified project.
+            # Sets the IAM access control policy for the specified project, in the
+            # format `projects/{ProjectIdOrNumber}` e.g. projects/123.
             #
             # CAUTION: This method will replace the existing policy, and cannot be used
             # to append additional IAM settings.
@@ -162,20 +168,17 @@ module Google
             # `setIamPolicy()`;
             # they must be sent only using the Cloud Platform Console.
             #
-            # + Membership changes that leave the project without any owners that have
-            # accepted the Terms of Service (ToS) will be rejected.
-            #
             # + If the project is not part of an organization, there must be at least
             # one owner who has accepted the Terms of Service (ToS) agreement in the
             # policy. Calling `setIamPolicy()` to remove the last ToS-accepted owner
             # from the policy will fail. This restriction also applies to legacy
             # projects that no longer have owners who have accepted the ToS. Edits to
             # IAM policies will be rejected until the lack of a ToS-accepting owner is
-            # rectified.
-            #
-            # + Calling this method requires enabling the App Engine Admin API.
+            # rectified. If the project is part of an organization, you can remove all
+            # owners, potentially making the organization inaccessible.
             rpc :SetIamPolicy, ::Google::Iam::V1::SetIamPolicyRequest, ::Google::Iam::V1::Policy
-            # Returns permissions that a caller has on the specified project.
+            # Returns permissions that a caller has on the specified project, in the
+            # format `projects/{ProjectIdOrNumber}` e.g. projects/123..
             rpc :TestIamPermissions, ::Google::Iam::V1::TestIamPermissionsRequest, ::Google::Iam::V1::TestIamPermissionsResponse
           end
 

data/lib/google/cloud/resourcemanager/v3/tag_bindings_pb.rb

@@ -8,6 +8,7 @@ require 'google/api/client_pb'
 require 'google/api/field_behavior_pb'
 require 'google/api/resource_pb'
 require 'google/longrunning/operations_pb'
+require 'google/protobuf/empty_pb'
 
 Google::Protobuf::DescriptorPool.generated_pool.build do
   add_file("google/cloud/resourcemanager/v3/tag_bindings.proto", :syntax => :proto3) do
@@ -15,6 +16,7 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       optional :name, :string, 1
       optional :parent, :string, 2
       optional :tag_value, :string, 3
+      optional :tag_value_namespaced_name, :string, 4
     end
     add_message "google.cloud.resourcemanager.v3.CreateTagBindingMetadata" do
     end
@@ -36,6 +38,23 @@ Google::Protobuf::DescriptorPool.generated_pool.build do
       repeated :tag_bindings, :message, 1, "google.cloud.resourcemanager.v3.TagBinding"
       optional :next_page_token, :string, 2
     end
+    add_message "google.cloud.resourcemanager.v3.ListEffectiveTagsRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :page_token, :string, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.ListEffectiveTagsResponse" do
+      repeated :effective_tags, :message, 1, "google.cloud.resourcemanager.v3.EffectiveTag"
+      optional :next_page_token, :string, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.EffectiveTag" do
+      optional :tag_value, :string, 1
+      optional :namespaced_tag_value, :string, 2
+      optional :tag_key, :string, 3
+      optional :namespaced_tag_key, :string, 4
+      optional :tag_key_parent_name, :string, 6
+      optional :inherited, :bool, 5
+    end
   end
 end
 
@@ -50,6 +69,9 @@ module Google
         DeleteTagBindingRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagBindingRequest").msgclass
         ListTagBindingsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagBindingsRequest").msgclass
         ListTagBindingsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagBindingsResponse").msgclass
+        ListEffectiveTagsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListEffectiveTagsRequest").msgclass
+        ListEffectiveTagsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListEffectiveTagsResponse").msgclass
+        EffectiveTag = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.EffectiveTag").msgclass
       end
     end
   end

data/lib/google/cloud/resourcemanager/v3/tag_bindings_services_pb.rb

@@ -25,7 +25,7 @@ module Google
       module V3
         module TagBindings
           # Allow users to create and manage TagBindings between TagValues and
-          # different cloud resources throughout the GCP resource hierarchy.
+          # different Google Cloud resources throughout the GCP resource hierarchy.
           class Service
 
             include ::GRPC::GenericService
@@ -34,17 +34,19 @@ module Google
             self.unmarshal_class_method = :decode
             self.service_name = 'google.cloud.resourcemanager.v3.TagBindings'
 
-            # Lists the TagBindings for the given cloud resource, as specified with
-            # `parent`.
+            # Lists the TagBindings for the given Google Cloud resource, as specified
+            # with `parent`.
             #
             # NOTE: The `parent` field is expected to be a full resource name:
             # https://cloud.google.com/apis/design/resource_names#full_resource_name
             rpc :ListTagBindings, ::Google::Cloud::ResourceManager::V3::ListTagBindingsRequest, ::Google::Cloud::ResourceManager::V3::ListTagBindingsResponse
-            # Creates a TagBinding between a TagValue and a cloud resource
-            # (currently project, folder, or organization).
+            # Creates a TagBinding between a TagValue and a Google Cloud resource.
             rpc :CreateTagBinding, ::Google::Cloud::ResourceManager::V3::CreateTagBindingRequest, ::Google::Longrunning::Operation
             # Deletes a TagBinding.
             rpc :DeleteTagBinding, ::Google::Cloud::ResourceManager::V3::DeleteTagBindingRequest, ::Google::Longrunning::Operation
+            # Return a list of effective tags for the given Google Cloud resource, as
+            # specified in `parent`.
+            rpc :ListEffectiveTags, ::Google::Cloud::ResourceManager::V3::ListEffectiveTagsRequest, ::Google::Cloud::ResourceManager::V3::ListEffectiveTagsResponse
           end
 
           Stub = Service.rpc_stub_class

data/lib/google/cloud/resourcemanager/v3/tag_holds_pb.rb

@@ -0,0 +1,63 @@
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# source: google/cloud/resourcemanager/v3/tag_holds.proto
+
+require 'google/protobuf'
+
+require 'google/api/annotations_pb'
+require 'google/api/client_pb'
+require 'google/api/field_behavior_pb'
+require 'google/api/resource_pb'
+require 'google/longrunning/operations_pb'
+require 'google/protobuf/empty_pb'
+require 'google/protobuf/timestamp_pb'
+
+Google::Protobuf::DescriptorPool.generated_pool.build do
+  add_file("google/cloud/resourcemanager/v3/tag_holds.proto", :syntax => :proto3) do
+    add_message "google.cloud.resourcemanager.v3.TagHold" do
+      optional :name, :string, 1
+      optional :holder, :string, 2
+      optional :origin, :string, 3
+      optional :help_link, :string, 4
+      optional :create_time, :message, 5, "google.protobuf.Timestamp"
+    end
+    add_message "google.cloud.resourcemanager.v3.CreateTagHoldRequest" do
+      optional :parent, :string, 1
+      optional :tag_hold, :message, 2, "google.cloud.resourcemanager.v3.TagHold"
+      optional :validate_only, :bool, 3
+    end
+    add_message "google.cloud.resourcemanager.v3.CreateTagHoldMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteTagHoldRequest" do
+      optional :name, :string, 1
+      optional :validate_only, :bool, 2
+    end
+    add_message "google.cloud.resourcemanager.v3.DeleteTagHoldMetadata" do
+    end
+    add_message "google.cloud.resourcemanager.v3.ListTagHoldsRequest" do
+      optional :parent, :string, 1
+      optional :page_size, :int32, 2
+      optional :page_token, :string, 3
+      optional :filter, :string, 4
+    end
+    add_message "google.cloud.resourcemanager.v3.ListTagHoldsResponse" do
+      repeated :tag_holds, :message, 1, "google.cloud.resourcemanager.v3.TagHold"
+      optional :next_page_token, :string, 2
+    end
+  end
+end
+
+module Google
+  module Cloud
+    module ResourceManager
+      module V3
+        TagHold = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.TagHold").msgclass
+        CreateTagHoldRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagHoldRequest").msgclass
+        CreateTagHoldMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.CreateTagHoldMetadata").msgclass
+        DeleteTagHoldRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagHoldRequest").msgclass
+        DeleteTagHoldMetadata = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.DeleteTagHoldMetadata").msgclass
+        ListTagHoldsRequest = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagHoldsRequest").msgclass
+        ListTagHoldsResponse = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.cloud.resourcemanager.v3.ListTagHoldsResponse").msgclass
+      end
+    end
+  end
+end